TRANSACTION NUMBER MANAGEMENT METHOD 
IN NETWORK COMMODITY SALES 



BACKGROUND OF THE INVENTION 
5 Field of the Invention 

The present invention relates generally to a 
transaction number management method in Internet commodity 
sale transactions, and more particularly, to security 
protection of transaction numbers. 
10 Descrip t ion o f the Related Arts 

Internet commodity sales are in a rapid spread. A 
user connects a terminal to internet via a communication 
line, and displays a commodity sale site provided by a 
server managed by a commodity sale enterprise on a screen 
15 of the terminal . 

The user operates the terminal, and selects a 
commodity which the user desires from a plurality of 
commodities displayed in the commodity sale site. The 
selected commodity data are noticed to the server, which 
20 temporally stores the data in a predetermined file until 
a purchase of the commodity is determined. Namely, the 
selected commodity data are temporally stored in the file 
of the server, and the condition is compared to a condition 
that the selected commodity is entered into a cart in 
25 contrast to a shopping at a conventional store. Therefore, 
this predetermined file is called a cart file. 

In order to discriminate each cart, the server 
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provides a transaction number (cart ID) to the cart file. 
Namely, the transaction number (cart ID) is provided to a 
single shopping transaction with the user. When the server 
receives commodity data selected first in a certain 
5 shopping of the user, it issues a new cart ID, and stores 
the commodity data selected in the cart file in response 
to the cart ID. 

The issued cart ID is sent to the terminal, and is 
stored in the terminal by predetermined means . For example, 

10 the cart ID is stored in a memory unit (hard disk unit) of 

Q ... 
;S the terminal as a cookie. Alternatively, the cart ID is 

i^* displayed on a terminal screen as a URL of a commodity sale 

p; site. Alternatively, the cart ID is written into a HTML 

document of the commodity sale site sent from the server. 

15 In this case, the HTML document may be constituted so as 

not to display the cart ID on the screen, but the cart ID 

g written into the HTML document is held in the terminal. 

,=r When the user selects a next commodity, the commodity 

data are noticed to the server along with the cart ID. The 

20 server stores the commodity data in the cart file 

corresponding to the cart ID. In this manner, even in the 

case where the commodities are selected a plurality of times 

before confirming the purchase in a single shopping by the 

user, a plurality of the commodity data can be stored in 

25 the same cart file. 

Meantime, in many cases, a conventional cart ID was 

constituted by, for example, date information such as an 
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issue date, time, or the like and a receipt number of the 
cart ID. The receipt number is a serial number indicating 
a number of the cart ID issued in the order of transaction 
receipts on the date. For example, in the case where the 
5 185-th cart ID on the date is issued at 9:26 p.m. on February 
28, 2000, the cart ID is "0002282126185 ." In this manner, 
it is possible to manage the cart ID in a uni-sense by 
utilizing the serial number for the cart ID, thereby 
facilitating the management of the cart ID. 
10 However, the management of the cart ID by the receipt 

number causes a drawback in security. For example, in the 
case where such the cart_ID—i~s~drsplayed as the URL at the 
terminal of the user, the user can readily know another 
person's cart ID. Accordingly, by inputting a digit code 
15 assumed as the another person's cart ID as the URL, there 
is a possibility that a shopping data connected with the 
another person's cart ID is acquired from the server, so 
that the user can see it. Furthermore, the user can alter 
another person's order, too. 
20 In order to solve such drawbacks, it is considered 

that the cart ID is not displayed. Specifically, as 
described above, the cart ID is written into a memory unit 
of the terminal as a cookie, or is non-openly incorporated 
into the HTML document, so that the cart ID can be non- 
25 disclosed. 

However, the non-disclosure of the cart ID causes the 
following inconveniences. Namely, in general, Internet 
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sales enterprise has a support system which receives a 
user's questions by a telephone call. In the case where 
the user telephones in the transaction during a commodity 
selection, as the user cannot tell the own cart ID, the 
5 enterprise cannot judge which transaction the user is 

talking about, so the user can't get a smart and sufficient 
support . 

Furthermore, in order to solve the aforesaid 
drawbacks, it is considered that the cart ID is encoded and 

10 the encoded ID is disclosed to the user. Namely, the cart 
ID containing information of a date, a time, and a receipt 
number is encoded by a password algorithm to form a random 
code, so that a sense included in the cart ID is not clarified 
to the user. Thus, it becomes difficult to analogize the 

15 other existent cart IDs. 

However, encoding of the cart ID causes the below 
inconveniences. Namely, the encoding of the cart ID gives 
a large load on the server. Specifically, in the case where 
the cart ID is encoded, it is necessary to encode in the 

20 server and also decode, and for this reason, a surplus time 
has to be taken. 

Furthermore, in the case where the user puts a 
question to the enterprise having the aforesaid support 
system by a telephone call, the user tells the disclosed 

25 encoded ID. Accordingly, unless the enterprise decodes it 
once and acquires the cart ID, the enterprise cannot grasp 
transaction information of the user corresponding to the 
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cart ID. Therefore, the enterprise cannot correspond 
promptly to the user. In this manner, when the cart ID 
itself containing the serial number is not disclosed, the 
inconveniences are given to the user. It is thus 
5 undesirable . 



SUMMARY OF THE INVENTION 

It is therefore an object of the present invention 
to provide a method and apparatus for managing transaction 
10 numbers which can ensure the security, while laying open 
a cart ID (transaction number) containing a serial receipt 
number . 

In order to attain the above object, a cart ID 
according to the present invention is an identification 

15 code including receipt information containing at least a 
receipt number (serial number) indicating a receipt number 
of the transaction, and further unmeaning password 
information. Furthermore, it is preferable that the 
receipt information has date information in which the cart 

20 ID is issued. In this manner, the cart ID according to the 
present invention contains the password information in 
addition to the receipt information having conventional 
date information and the receipt number, whereby even when 
the cart ID is disclosed to the principal, it is possible 

25 to prevent another person from being informed thereof. For 
example, even when a mala fide user shifts the receipt 
number, and acquires another person's cart ID, as the 
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password information is a random code, so far as the 
password information is not also coincident , the another 
person's cart ID cannot be acquired. On the other hand, 
as the cart ID according to the present invention contains 
5 the date information and receipt number, it is possible to 
utilize instantly these numbers without being decoded. 

To achieve the above object, according to an aspect 
of the present invention, there is provided a method of 
managing transaction numbers in commodity sale 
10 transactions via a network, the method comprising the steps 
of issuing a transaction number including receipt 
."z information and predetermined password information, the 

:!f receipt information containing at least a receipt number 

~ indicative of the order of receipt of a predetermined 

s 15 transaction with a user; and 

displaying the transaction number on a terminal of the user. 

1 y 

J=? For example, the network may be Internet and the 

l ^ transaction number may be displayed, as part of URL of 

Internet / on the terminal. Preferably, the receipt 
20 information of the transaction number contains date and 
time at issuance of the transaction number. Preferably, 
the password information of the transaction number contains 
a plural-digit random number. Preferably, the transaction 
number is issued when at least one commodity is selected 
25 at the terminal, the transaction number being utilized till 
the determination of purchase of the selected commodity. 
Preferably, the transaction number is issued when an access 
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is made from the terminal to a system of the commodity sale 
transaction, the transaction number being utilized till the 
determination of purchase of the commodity . In those cases , 
the transaction number may be invalidated when a 
predetermined period of time elapses before the 
determination of purchase of the selected commodity after 
the issuance of the transaction number . 

The method of the present invention preferably 
further comprises the step of, when another transaction 
number is received which coincides only with either the 
receipt information or password information of the 
transaction number, judging an improper access to the 
transaction number to erase the transaction number to 
reissue a new transaction number. 

The method of the present invention preferably 
further comprises the steps of, when another transaction 
number is received which coincides only with either the 
receipt information or password information of the 
transaction number, judging an improper access to the 
transaction number to count the number of times of the 
access; and when a transaction number is received after 
the number of times of the access has reached a 
predetermined number of times, erasing the transaction 
number to reissue a new transaction number, and displaying 
the new transaction number on the terminal. 

The method of the present invention preferably 
further comprises the step of, when another transaction 



number is received which coincides only with either the 
receipt information or password information of the 
transaction number, judging an improper access making use 
of the transaction number to delay a response to the 
5 terminal using the another transaction number. 

The method of the present invention may further 
comprise the step of, upon detection of an improper access 
to the transaction number, notifying alarm information to 
a terminal which sent the another transaction number. 

10 

BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a diagram showing a structural example of 
a computer network according to an embodiment of the present 
invention ; 

15 Fig. 2 is a diagram showing a structural example of 

a server 10; 

Fig. 3 is a flowchart of a method of managing a cart 
ID according to the embodiment of the present invention; 

Fig. 4 is a flowchart of the method of managing the 
20 cart ID according to the embodiment of the present 
invention; 

Fig. 5 shows is an example of a screen displayed in 
a terminal 20; 

Fig. 6 shows an example of the screen displayed in 
25 the terminal 20; 

Fig. 7 shows an example of the screen displayed in 
the terminal 20; 

8 
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Fig. 8 shows an example of the screen displayed in 
the terminal 20; 

Fig. 9 shows an example of the screen displayed in 
the terminal 20; 
5 Fig. 10 shows an example of the screen displayed in 

the terminal 20 ; 

Fig. 11 is a flowchart of an order confirmation 
process ; 

Fig. 12 is a flowchart of a method of managing the 
10 cart ID according to another embodiment of the present 
invention; and 

Fig. 13 is a flowchart of a countermeasure method with 
respect to an improper access according to the embodiment 
of the present invention. 

15 

DESCRIPTI O N O F THE PREFERRED EMBODIMENTS 
Preferred embodiments of the present invention will 
now be described. However, a technical scope according to 
the present invention is not limited to the embodiments of 
20 the present invention. In the embodiments of the present 
invention, a personal computer will be described as an 
example of a commodity which is sold on Internet. 

Fig. 1 is a diagram showing a structural example of 
a computer network according to the embodiment of the 
25 present invention. In Fig. 1, a server 10 and a plurality 
of client terminals 20 are connected to Internet through 
a communication line. The server 10 is a server for 
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providing Internet sales site according to the embodiment 
of the present invention, and storing a HTML file for the 
site, various programs and a database explained below, and 
the like. Each terminal 20 is, for example, a personal 
5 computer of a user, and comprises a control unit constituted 
by a CPU or the like, a display unit such as a CRT display, 
a liquid crystal display, or the like, and an input unit 
such as a key board, a mouse, or the like. Furthermore, 
the HTML file is acquired from the server 10 at the terminal 
10 20, and a browser 21 for displaying it on the screen is 
installed . 

Fig. 2 is a diagram showing a structural example of 
the server 10. A control unit 11 is constituted by the CPU 
or the like. The control unit 11 controls a readout of a 

15 file, a transfer of a file, each unit within the server 10, 
and retrieves a database, and issues the cart ID, and 
performs a managing process such as erasing or the like, 
and performs various operation processes. A communication 
unit 12 controls a transmission and receipt of files and 

20 data. For example, the communication unit 12 receives data 
from the terminal 20, and transfers them to the control unit 
11, and further the files transferred from the control unit 
11 are sent to the terminal 20. Furthermore, the following 
files are stored in a predetermined memory unit within the 

25 server 10. 

A HTML file 13 is a file composed of a plurality of 
pages constituting Internet sale site, and is described by 
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a HTML (HyperText Markup Language) language. 

A main program file 14 has a program for reading out 
the HTML file to transfer it to the terminal 20; a program 
for processing data from the terminal 20; a program for 
5 retrieving a database; a program for burying the retrieval 
results in the HTML file; and a program for managing the 
cart ID. 

A commodity database 15 stores a plurality of pieces 
of attribute information in response to all transaction 
10 commodities. For example, in the case where the commodity 
*S is a personal computer, the attribute information is a 

in product name, a price, a type (desktop type or notebook 

i'5 type) , and various functions of the personal computer. The 

j«j functions are a type of a CPU, a capacity of a memory, a 

15 capacity of a hard disk, a type of a display, presence or 
m absence of a CD-ROM or DVD-ROM, and the like. The attribute 

information of the commodity is converted into the HTML file, 
"'^ and is sent to the terminal 20, and is displayed on a screen 

of the terminal 20. 
20 Furthermore, the server 10 comprises a cart file 16 

for temporally storing commodity data selected by a user 
by operating the terminal 20; and a purchase file 17 for 
storing the commodity data in which the purchase is 
determined. The commodity data within the cart file 16 are 
25 managed according to a cart ID (transaction number) to be 
provided each time the user buys the commodity. 

According to the embodiment of the present invention, 
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this cart ID is an identification code containing receipt 
information containing at least a receipt number (serial 
number) indicating a receipt order of the transaction; and 
further unmeaning password information. Furthermore, it 
5 is preferable that the receipt information has date 
information in which the cart ID is issued. Namely , 

Cart ID = Date Information + Reception Number (Serial 
Number) + Cipher Information 

In this manner, the cart ID according to the present 
10 invention contains the password information in addition to 
;2 the receipt information having conventional date 

:fj information and the receipt number, so that even when the 

cart ID is disclosed to the principal, it is possible to 

in 

prevent another person from being informed thereof. For 
15 example, even when a mala fide user shifts the receipt 
m number, and acquires another person's cart ID, as the 

password information is a random code, so far as the 
™ password information is not also coincident, the another 

person's cart ID cannot be acquired. 
20 On the other hand, as the cart ID according to the 

present invention contains the date information and receipt 
number, it is possible to utilize instantly these numbers 
without being decoded. For example, when the user puts a 
question to a support center of an enterprise by a telephone 
25 call, the user tells the disclosed own cart ID, so that the 
enterprise can acquire the date information and receipt 
number (serial number) of the transaction without decoding 

12 



the cart ID, and can promptly cope with the user. 

Figs. 3 and 4 are flowcharts of a method of managing 
the cart ID according to the embodiment of the present 
invention. Furthermore, Figs. 5 to 10 are examples of a 
screen displayed in the terminal 20 in each step of the 
method of managing the cart ID. With reference to Figs. 
5 to 10, Figs. 3 and 4 will be described. 

In Fig. 3, first, a user A utilizes a browser 21 of 
a terminal 20A, and accesses Internet commodity sale site 
provided by the server 10 via Internet (S10). The server 
10 sends, for example, the HTML file for a commodity guide 
screen to the terminal 20A in response to the access (Sll) . 
The terminal 20A displays the HTML file sent on the screen 

(512) . At this point of time, the cart ID is not issued. 

Fig. 5 is an example of a commodity guide screen. On 
the screen, an explanation of a commodity (for example, a 
personal computer) is displayed. In Fig. 5, the user A 
inputs the quantity of the commodity, and clicks "Place the 
commodity on the cart", so that the commodity is selected 

(513) . The selected commodity data are sent from the 
terminal 20A to the server 10 ( S14 ) . The server 10 receives 
the commodity data. At this time, as the cart ID is not 
included in the commodity data in response to an initial 
commodity selection, the server 10 issues a new cart ID, 
and stores the commodity data in the cart file 16 together 
with the cart ID (S15). 

The cart ID to be issued contains date information 
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as an issue date and an issue time; a receipt number on the 
issue date; and predetermined password information. For 
example, in the case where the 185-th cart ID on the date 
is issued at 9:26 p.m. on February 28, 2000, the cart ID 
5 is "00022821261856637864." Of this digit code, 

"0002282126185" of the upper 13 digits is in sequence date 
information and a receipt number. "6637864" of the lower 
7 digits is password information containing a random number 
generated at random. This password information is not a 
10 serial number, and the number has no specified sense. 
3 Incidentally, when the user A clicks "In the cart" 

in on the screen of Fig. 5 before the cart ID is issued, the 

Pi screen shown in Fig. 6 is displayed. As the cart ID is not 

jg issued, the server 10 does not receive the cart ID together 

15 with a demand in response to "In the cart." The server 10 
i=y recognizes that the commodity is not selected, and the HTML 

«3 file for the screen shown in Fig. 6 is sent to the terminal 

^ 2 OA. 

When the server 10 stores the commodity data in the 
20 cart file 16, the server 10 sends the commodity data in 
response to the cart ID in the cart file 16 as the HTML file 
in order to identify the selected commodity (S16). Fig. 
7 is an example of a selection identification screen. In 
Fig. 7, the name of commodity selected, etc. are displayed. 
25 Furthermore, the cart ID "00022821261856637864" is 

displayed as part of a URL in a URL display part in the screen. 
Thus , the user A can know the cart ID in response to a present 
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shopping . 

Here, the user A operates to return the screen to a 
previous screen (clicks "Return" in an operation menu of 
an browser not shown) (S17). The terminal 20A sends a 
5 demand corresponding to "Return" together with the cart ID 
(S18). Then, the server 10 sends the HTML file 
corresponding to the same commodity guide screen (Fig. 8) 
as the screen of Fig. 5 as a screen prior to the present 
screen together with the cart ID (S19). The terminal 20A 

10 displays the screen of Fig. 8 corresponding to the sent HTML 
file (S20). On the screen of Fig. 8, the cart ID is 
displayed in the URL display part. In this manner, once 
the cart ID is issued, the cart ID is added to the data 
communicated between the server 10 and terminal 20A. 

15 Accordingly, even when the screen is changed during the user 
A's selection of the commodity, the cart ID is always 
displayed in the URL display part of the screen, and the 
user A can look at the cart ID. 

The user A clicks "In the cart" of Fig. 8 in order 

20 to identify the selected commodity in the present shopping 
(S21). The terminal 20A sends a demand corresponding to 
"In the cart" together with the cart ID (S22). The server 
10 receives the cart ID together with the demand. The 
server 10 reads out the commodity data managed by the 

25 received cart ID from the cart file 16 (S23), and sends the 
HTML file for the commodity identification screen in which 
the commodity data are buried together with the cart ID 
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(S24). The terminal 20A displays the commodity 
identification screen of Fig. 9 in response to the sent HTML 
file (S25). On the screen of Fig. 9, the commodity data 
stored in the cart in response to the present cart ID are 
displayed. Of course, the cart ID is displayed in the URL 
display part. Here, the user A clicks "Continue the 
shopping" of Fig. 9, to display the other commodity guide 
screens (not shown), and continues a commodity selection. 

Referring then to Fig. 4, while the user A selects 
a commodity, the server 10 is accessed at a terminal 20Z 
of a mala fide user Z. Specifically, similar to the case 
of the user A, the terminal 20Z accesses Internet commodity 
sale site provided by the serer 10 via Internet (S30) . The 
server 10 sends, for example, the HTML file for the 
commodity guide screen to the terminal 20Z in response to 
the access (S31). The terminal 20Z displays on the screen 
of Fig. 5 in response to the sent HTML file (S32). At this 
point of time, the cart ID has not been yet issued. 

The user Z inputs the quantity of commodity selected 
arbitrarily, and clicks "Place it in the cart" (S3 3 ) . Thus , 
the commodity is selected and the commodity data are sent 
to the server 10 (S34). 

When the server 10 receives the commodity data, a new 
cart ID is issued, and the commodity data are stored in the 
cart file 16 together with the cart ID (S35). The receipt 
number included in the issued cart ID is later than the 
receipt number included in the cart ID of the user A. 
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Furthermore/ the date information included in the cart ID 
of the user Z is the same time as that in the user A, or 
a time (or a date) later than that in the user A • 
Furthermore, the password information included in the cart 
5 ID of the user Z is a number which has no connection with 
that of the user A. 

When the server 10 stores the commodity data in the 
cart file 16, the commodity data corresponding to the cart 
ID in the cart file 16 are sent as the HTML file in order 
10 to confirm the selected commodity (S36). The terminal 20Z 
displays the selection identification screen of Fig. 7 
(S37). However, the cart ID displayed as a part of the URL 
in the URL display part is an ID issued to a shopping of 
the user Z . 

15 Here, the user Z changes some part of the cart ID 

displayed in the URL display part . For example, assume that 
the cart ID of the user Z is "0 00 2 82126 6186XXXXXXX." Namely, 
the cart ID of the user Z is issued at the same time as that 
of the user A, and has a next number of the receipt number 

20 of the user A. Furthermore, the lower 7 digits "XXXXXXX" 
of the cart ID of the user Z is the password information 
containing a random number generated at random by the server 
10 as described above. 

The user Z changes "186" as a receipt number part of 

25 the cart ID to a previous number "185." Furthermore, the 
user Z presumes that the date information is same as in the 
user A, and the date information is not to be changed . Thus , 
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the date information and receipt number part of the cart 
ID displayed on the screen of the terminal 20Z of the user 
Z are coincident with those of the user A. However, as the 
user Z cannot expect at all a password information part of 
5 the cart ID of the user A f an arbitrary number "YYYYYYY" 
is given. This number is a number different from the 
password information of the cart ^ID^of the user A. 

The user Z changes the displayed cart ID to 
"0002282126185YYYYYYY," and depresses an "ENTER" button of 

10 the terminal 20Z (S38). Thus, a demand of the HTML file 
in response to the URL containing the cart ID is sent to 
the server 10 (S39) . When the server 10 receives the demand 
from the terminal 20Z, it searches the interior of the cart 
file 16 for the received cart ID. However, the received 

15 cart ID does not exist. The received cart ID coincides with 
the cart ID of the user A in the date information and receipt 
number part, but as the password information part is 
different, they do not coincide with the cart ID. 

When the server 10 judges that the received cart ID 

20 is different from the cart ID of the user A in only the 
password information part, the server 10 recognizes that 
an improper access is performed to the cart ID of the user 
A, and counts improper access every cart ID (S40). 
Furthermore, the alarm information is sent to the terminal 

25 20Z of the user Z (S41). At the terminal 20Z, the alarm 
information shown in Fig. 10 is displayed overlaid on the 
screen displayed currently (screen of Fig. 6) (S42). The 
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alarm information is vanished from on the screen by clicking 
an OK button of Fig. 10. 

Incidentally, in the case where both of the date 
information and receipt number part of the received cart 
ID and the password information part are not coincident with 
either of those of the cart ID in the cart file 16 , the server 
10 does not count the number of times of the access and 
notices only the alarm information. Incidentally, in the 
case where the cart ID which coincides with only the 
password information part of the received cart ID exists 
in the cart file 16, the server 10 judges that the improper 
access is done, and counts the number of times of access 
in the cart ID as a target of the improper access . Similarly, 
the alarm information is notified. 

The user Z erases the alarm information, and changes 
the password information to another digit code again, and 
repeats the access to the server 10. Namely, steps S38 to 
S42 are repeated. Each time the improper accesses are 
repeated, the alarm information shown in Fig. 10 is 
displayed. Therefore, the user Z has to operate to erase 
it. Accordingly, it is possible to delay the improper 
access by the user Z. 

As the password information part has a plurality of 
digits containing a random number (7 digits in this 
embodiment), the probability is extremely low that the 
password information of the cart ID input at a guess by the 
user Z coincides with that of the cart ID of the user A. 
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Each time the server 10 judges that it is an improper access, 
the server 10 counts the number of times of accesses. When 
the number of times of the improper accesses to the cart 
ID of the user A reaches N times ( for example, three times ) , 
the server 10 erects a flag (FL) for the cart ID of the user 
A in the cart file 16 (S43). When the server 10 erects the 
flag for the cart ID, when the server 10 next receives the 
cart ID, the server 10 erases the cart ID from the cart file 
16 and reissues another cart ID. 

Assume that, in a condition that a flag is erected 
in the cart ID of the user A, the user A per se accesses 
the server. This is, for example, the case where the user 
A selects an additional commodity on the commodity guide 
screen, and clicks "Place it in the cart" (S44). In this 
case, the cart ID of the user A is sent to the server 10 
together with the commodity data (S45). As a flag is 
erected in the cart ID of the user A in the cart file 16, 
when the server 10 receives the cart ID of the user A, the 
server 10 invalidates the received cart ID of the user A 
(preferably, erases it), and reissues the cart ID of the 
user A (S46). Furthermore, the flag erected is lowered. 
The server 10 sends the HTML file of the selection 
identification screen (Fig. 7) containing the cart ID 
reissued to the terminal 20A. 

The cart ID reissued has the date information and 
receipt number at the time of re-issuance, and further 
contains the password information containing a random 
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number generated newly. Accordingly, the date information 
and receipt number part of the cart ID of the user A reissued 
are different from them in the ex-cart ID of the user A, 
and the cart ID containing a number called "185" in the 
5 receipt number part does not exist in the cart file 16. 
Accordingly , even when the user Z tries to access many times , 
the improper access is never succeeded. 

In this manner, the cart ID according to the 
embodiment of the present invention has the date 

10 information and receipt number as well as the password 
information. Since the password information contains a 
random number having no specific sense, it is impossible 
to decode another person's password information part in 
effect. Accordingly, even when the date information and 

15 receipt number part are disclosed, the improper access can 
be prevented. According to the embodiment of the present 
invention, further, in the case where the number of times 
of the improper access reaches the predetermined one, in 
order to make perfection more perfect in security of the 

20 cart ID, the cart ID as a target of the improper access is 
reissued. Specifically, as described above, when the 
server detects an access by the cart ID in which the date 
information and receipt number coincide with each other, 
but the password information does not coincide with each 

25 other, or an access by the cart ID in which the date 

information and receipt number do not coincide with each 
other, but the password information coincides with each 
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other, the server 10 recognizes it as the improper access 
to the really existing cart ID containing the coincident 
part, and counts the number of times of access. After the 
number of times of access to the cart ID as a target of the 
5 improper access reaches the predetermined number of times, 
when the server 10 detects the access by the cart ID, the 
server 10 erases the cart ID and reissues a new cart ID. 
Thus, as the cart ID as the target of the improper access 
does not exist, the improper access can fully be prevented. 
10 Fig. 11 is a flowchart of an order confirmation 

Jg process by the user A. In Fig. 11, when the user A ends 

IH a commodity selection, the user A clicks a "Purchase" button 

q on the screen of Fig. 7, 8, or 9 (S50). The purchase 

p confirmation notice is sent to the server 10 together with 

1=^ 15 the cart ID ( S51 ) . When the server 10 receives the purchase 
|lj confirmation notice, the server 10 transfers the commodity 

n data managed by the received cart ID to a purchase file 17 

™ in the cart file 16 (S52 ) . Namely, the cart ID and commodity 

data are erased from the cart file 16. On the other hand, 

20 the commodity data transferred to the purchase file 17^are 

v 

managed by an order ID to be newly issued. 

When the commodity data are stored in the purchase 
file 17, it is impossible to change the purchase after the 
point of time. Because the purchase file 17 is an access 
25 disable file. On the other hand, the cart file 16 is a file 
which can be accessed by the terminal 20 so as to cancel 
the once selected commodity, and add, change, or the like 
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the commodity to be purchased. Accordingly, there is a 
danger of the improper access from the other users, and 
according to the aforesaid embodiment, the improper access 
to the accessible cart file 16 is prevented. 
5 The server 10 sends the HTML file in response to a 

purchase confirmation screen (not shown), and notices the 
order ID to the user A (S53). Furthermore, the purchase 
confirmation may separately be noticed by an electronic 
mail. Alternatively, it may be noticed by a mail service. 

10 Furthermore, according to the embodiment of the 

present invention, when a predetermined period of time or 
more has elapsed from the issue time before the issued cart 
ID is erased by the aforesaid purchase confirmation, the 
issued cart ID may automatically be erased. The 

15 predetermined period of time is, for example, 2 days (48 
hours). In the case where the user selects the commodity 
and places the commodity data in the cart file 16, while 
the user disconnects the transaction, in order to clear the 
transaction, the server 10 erases the commodity data and 

20 cart ID in the cart file 16 corresponding to the 
transaction . 

Accordingly, after a predetermined period of time or 
more has elapsed from the issue time of the cart ID, even 
when the user desires to continue the disconnected 
25 transaction, the cart ID and commodity data are erased in 
the cart file. Therefore, the user cannot continue to 
transaction . It is assumed that the user has doubts about 
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the matter and telephones to the support center. Even in 
this case, the terminal of the user displays the cart ID 
issued prior to the disconnection of the transaction by a 
history storage function of the browser. Accordingly, the 
5 user can send the displayed cart ID to the support center. 
As the cart ID includes time information at the time of the 
issue, the support center can forthwith judge that 2 days 
or more have elapsed after the issue of the cart ID, and 
can promptly answer the user that the transaction is 
10 cleared. In the case where the cart ID is non-displayed, 

,q or is all encoded as in the prior art, in order to perform 

a retrieval process or decode process of the cart ID, it 

jjj is necessary for the user to wait for a while during the 

i=3 telephone call. However, according to the embodiment of 

15 the present invention, it is possible to promptly answer 

jij the user, and contribute to enhance a service of the support 

f«J center. 

''^ Next, a method of managing the cart ID according to 

another embodiment of the present invention will be 

20 explained . 

Fig. 12 is a flowchart of the method of managing the 
cart ID according to another embodiment of the present 
invention. Incidentally, only a characteristic process 
part according to this embodiment will be described, and 

25 the other processes are same as a process content explained 
by use of Figs. 3 and 4. Therefore, the description is 
omitted . 
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In the process of the embodiment in Figs. 3 and 4, 
the cart ID is issued at the point of time when a commodity 
is selected. On the contrary, this embodiment differs 
mainly in that the cart ID is issued at the point of time 
5 when Internet commodity sale site provided by the server 
10 is accessed by the terminal 20A. 

In Fig. 12, first, the user A utilizes the terminal 
20A (browser 21) to access Internet commodity sale site 
provided by the server 10 via Internet. 
10 The server 10 newly issues the cart ID in response 

^ to the access and stores it in the cart file 16 (S61). A 

"2 form of this cart ID and a method of forming it are same 

si | 

:S? as in the aforesaid embodiment. 

u 

!i| Furthermore, the server 10 sends to the terminal 20A 

15 the HTML file for the commodity guide screen containing the 

\^ cart ID issued newly (S62). 

if! 

m The terminal 20A displays the sent HTML file on the 

% ~ screen (S63). The cart ID is displayed as part of the URL 

in the URL display part of the commodity guide screen 
20 displayed. 

When the user A selects the commodity (S64), the 
selected commodity data and cart ID are sent from the 
terminal 20A to the server 10 (S65). 

The server 10 stores the commodity data in the 
25 corresponding cart file 16 based on the cart ID received 
together with the commodity data from the terminal 20A 
( S66 ) . 
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Furthermore, in order to identify the selected 
commodity, the server 10 sends the HTML file for the 
selection identification screen to the terminal 20A (S67). 
According to the aforesaid embodiment, when 
5 returning to a condition prior to issuing the cart ID by 
utilizing the history storage function of the browser after 
the cart ID has been issued, such a phenomenon occurs that 
the cart ID is not displayed in the URL display part. 

On the contrary, according to this embodiment, since 
10 the cart ID is issued at the point of time when the user 
accesses the commodity sale site, as far as perusing a page 
within this site, the cart ID is always displayed in the 
URL display part, so that it becomes possible to prevent 
the occurrence of the phenomenon. 
15 Furthermore, another embodiment in a countermeasure 

method of the improper access in Fig. 4 will be described. 

Fig. 13 is a flowchart of the countermeasure method 
of the improper access according to another embodiment of 
the present invention. Incidentally, only a 
20 characteristic process part according to this embodiment 
is described, and the other processes are same as the 
process content described by use of Fig. 4 . Therefore, the 
description is omitted . 

In the process of Fig. 4, the number of times of the 
25 access is counted with respect to the improper access by 
the mala fide user Z , and the alarm information is displayed, 
and in the case where the number of times of access is the 
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predetermined number of times N or more, the cart ID which 
is being used so far is invalidated. 

In the process of Fig. 13 , in the case where the number 
of times of access as the improper access is less than the 
predetermined number of times N , and the predetermined 
number of times M or more, it is a characteristic process 
that a reply to the terminal 20Z which is being utilized 
by the user Z is intensively delayed. 

First, when the server 10 judges that the improper 
access by the cart ID changed by the user Z was made, the 
server 10 starts counting the number of times of access in 
the cart ID as the target of the improper access (S40). 

When the number of times of access is less than N times 
(here, for example, 7 times) and less than M times (for 
example, 3 times), the alarm information is promptly 
noticed to the terminal Z. However, when the number of 
times of access is less than N times and M times or more, 
the server 10 delays more than a normal response (S71), and 
thereafter notices the alarm information to the terminal 
20Z (S41). Incidentally, a delay time may be increased in 
proportion to an increase in the number of times of access. 
In this manner, the response to the mala fide user is delayed, 
so that the improper access operations can be prevented. 

According to the present invention, as set forth 
hereinabove, it is possible to prevent the improper access 
to the cart file which stores temporally the selected 
commodity data prior to the purchase confirmation in 
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Internet commodity sales. 

The scope of protection of the present invention is 
not intended to be limited to the above embodiments and 
covers the invention as defined in the appended claims and 
equivalents thereof . 
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